Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3136382e3139342e33362e302f32322d3234203d3e203238333433.roa
File:                     3136382e3139342e33362e302f32322d3234203d3e203238333433.roa (raw, json)
Hash identifier:          gHTPA3/olZRHONYVNiVBMq1u54CN86v0Evs/AsgVDdw=
Subject key identifier:   E2:33:13:EE:FC:8D:AD:EC:B4:38:BD:5C:27:6F:D4:D7:5E:48:E5:A0
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       73F7A66A7A2000BB23D33FE3309524FE83626E02
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3136382e3139342e33362e302f32322d3234203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:23 +0000
ROA not before:           Thu 28 Apr 2022 13:24:23 +0000
ROA not after:            Thu 27 Apr 2023 13:29:23 +0000
asID:                     28343
IP address blocks:        168.194.36.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:f7:a6:6a:7a:20:00:bb:23:d3:3f:e3:30:95:24:fe:83:62:6e:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:23 2022 GMT
            Not After : Apr 27 13:29:23 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b1:34:2e:82:4a:07:d9:4c:42:40:f8:09:2c:
                    9b:53:16:c7:ce:9a:e2:5b:c8:b0:41:54:db:e6:ad:
                    05:5d:d6:e3:ac:87:99:50:cb:96:ac:8f:3a:3a:0c:
                    93:0a:89:b5:86:38:19:1b:b5:20:c2:1b:4f:50:c8:
                    c5:67:eb:d4:08:66:ac:a6:6e:ad:c4:8e:23:0b:26:
                    01:22:be:25:8f:a6:13:1d:01:dc:e9:2c:84:ab:30:
                    a9:88:10:d5:00:c6:c0:17:f8:70:4c:65:ba:37:0b:
                    c0:6b:92:cc:6c:20:b9:4f:08:e6:9a:eb:c2:b6:87:
                    c7:35:9f:c3:0b:39:e1:2f:20:fd:3b:d2:4d:c4:eb:
                    58:f8:6d:65:09:61:65:d5:0d:45:53:ef:ff:31:9c:
                    91:9a:a1:7f:a2:6a:d8:71:09:1b:43:fe:c2:fe:c3:
                    31:7b:98:32:dd:99:da:cb:d9:c1:0b:27:ef:2a:4f:
                    aa:78:52:d8:a2:ce:b5:75:30:af:1f:8b:f2:55:75:
                    e4:87:88:c1:b6:7b:11:1a:5f:6d:de:3a:a0:e6:0a:
                    5b:68:62:eb:c5:e7:76:fa:d0:2c:a9:0c:64:4e:21:
                    2d:c9:f0:bf:e7:6a:53:36:4c:f8:3e:55:5e:22:91:
                    d1:11:f1:00:28:d3:f2:e0:ae:1d:a2:38:c6:76:42:
                    8a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:33:13:EE:FC:8D:AD:EC:B4:38:BD:5C:27:6F:D4:D7:5E:48:E5:A0
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/3136382e3139342e33362e302f32322d3234203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:66:e0:46:a9:cf:a9:6a:7d:74:6b:c6:28:c4:2d:10:a0:31:
         33:eb:22:11:27:b9:45:99:7b:86:f0:c2:1e:58:26:ae:73:e6:
         2e:de:d9:f5:93:65:8d:e5:f3:83:33:1f:c4:85:9f:ec:f7:e7:
         e3:27:c5:5d:50:c5:e2:d1:8d:d0:c4:d7:cd:56:39:aa:a1:22:
         80:e9:9f:3c:c7:a3:ac:8b:f1:0c:69:35:e7:5b:0d:8e:60:72:
         3a:87:1c:9f:9b:93:72:58:8d:1a:e6:d2:ec:ec:6f:8e:70:fe:
         58:40:e3:22:f9:d1:c3:a9:62:32:c5:24:8b:4c:0a:c6:63:ca:
         d7:32:84:5b:c8:28:82:69:80:4a:68:61:69:3b:e4:67:d0:83:
         90:27:c6:ba:36:54:cd:b3:a9:01:a2:ea:c5:71:11:18:5f:cc:
         41:ea:1f:ce:17:1e:5f:ca:35:87:0c:a8:56:c5:53:75:e5:45:
         54:d0:0c:66:b2:d8:7d:3c:76:8c:24:eb:99:b6:a0:8d:99:2b:
         47:a1:e8:30:b0:ec:9c:fc:55:a3:7d:94:d0:2a:49:44:75:f6:
         0b:fb:58:54:65:b6:6c:b0:e7:81:90:b4:4b:5d:12:f9:2c:57:
         4a:6c:3d:d1:a6:eb:91:2e:6c:18:2e:7c:75:8e:f1:86:d3:d8:
         18:1e:e9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org